Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Zjywv3fDGz2q9qq6xVrhokiUFtQ.roa
File: Zjywv3fDGz2q9qq6xVrhokiUFtQ.roa (raw, json)
Hash identifier: R5iHMItLZTSGzloNxuoHDDstJEcwA5kOWw3TuGyK1yA=
Subject key identifier: 66:3C:B0:BF:77:C3:1B:3D:AA:F6:AA:BA:C5:5A:E1:A2:48:94:16:D4
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018DA32140EAF966C223315D4AF7D90B06C4
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Zjywv3fDGz2q9qq6xVrhokiUFtQ.roa
Signing time: Tue 13 Feb 2024 15:41:21 +0000
ROA not before: Tue 13 Feb 2024 15:41:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61998
IP address blocks: 79.172.210.0/24 maxlen: 24
79.172.212.0/24 maxlen: 24
87.229.77.0/24 maxlen: 24
213.181.206.0/24 maxlen: 24
217.144.53.0/24 maxlen: 24
217.144.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a3:21:40:ea:f9:66:c2:23:31:5d:4a:f7:d9:0b:06:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 13 15:41:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=663cb0bf77c31b3daaf6aabac55ae1a2489416d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:44:41:85:50:78:f8:5f:41:7f:61:03:d2:
a8:b6:f2:a9:32:d1:bf:41:3b:6f:a8:5e:96:11:f2:
08:a5:c5:42:eb:52:79:7b:bf:76:64:26:06:92:e0:
6c:d9:5f:be:73:02:37:f7:da:94:23:2c:6d:4b:7e:
ed:01:27:4e:15:92:ce:84:1c:f2:40:44:c6:e7:06:
22:2d:2d:e4:6d:5a:01:e6:23:5c:4b:cb:2b:28:08:
c3:d4:f1:21:83:bd:97:9f:04:08:25:da:3c:9f:bd:
eb:42:bc:e2:0b:a6:d0:d6:21:29:74:44:2f:9c:af:
cf:c2:21:08:d1:e4:98:4c:4d:f6:c2:a7:e2:59:5d:
a7:ff:69:4a:e5:79:8d:91:90:b0:7b:37:1e:3f:51:
c2:05:04:3a:12:8b:79:71:08:8e:2d:00:c5:4c:63:
61:34:3e:61:16:7e:25:e7:19:97:2d:ef:61:1c:93:
23:54:f5:b7:fe:ee:f5:bd:7f:74:2f:7a:9d:15:ea:
e9:18:a7:03:61:12:87:3b:6a:22:b7:b1:f1:2f:82:
47:d4:9d:31:b4:ff:7a:5b:a3:81:bd:70:be:7d:cc:
72:3e:9f:bc:2e:c0:af:62:79:01:96:5c:85:af:a8:
cf:57:9d:d7:11:33:cc:b8:80:92:b7:c7:78:8f:e5:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3C:B0:BF:77:C3:1B:3D:AA:F6:AA:BA:C5:5A:E1:A2:48:94:16:D4
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Zjywv3fDGz2q9qq6xVrhokiUFtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.210.0/24
79.172.212.0/24
87.229.77.0/24
213.181.206.0/24
217.144.53.0-217.144.54.255
Signature Algorithm: sha256WithRSAEncryption
67:82:75:23:48:a0:8a:19:94:4d:ca:27:e6:16:a4:0c:84:7e:
a4:ea:d0:b7:47:94:fd:7d:75:bd:0c:5e:44:27:74:75:37:fb:
be:08:e9:10:d5:25:b9:37:37:70:f9:b4:90:9c:89:a0:6f:c7:
5e:42:84:5c:92:2a:6f:1f:96:8c:11:2d:a1:86:f5:b2:b3:95:
11:b2:88:01:28:70:66:51:7a:0f:31:69:7a:97:4f:d5:d3:6e:
8f:0d:4b:2a:e0:da:ba:26:44:1a:dc:89:9a:9f:90:28:43:23:
93:30:c1:45:79:40:7c:aa:06:a8:ec:97:f2:dc:55:04:37:2a:
85:57:91:24:c7:e3:e9:99:5e:42:10:75:80:8a:11:69:4d:ad:
03:ce:f5:63:96:84:c0:c3:ea:b4:48:13:64:cc:e4:49:65:dc:
b1:ce:67:8f:c9:9e:49:4c:c9:92:2f:d9:c5:ee:b0:16:f8:36:
ea:95:cf:77:a3:75:08:d9:fd:ca:87:2e:3d:c6:26:49:53:7c:
d8:98:07:7a:d0:51:89:33:f9:cd:9d:f1:79:a0:c9:ac:42:b8:
2e:e9:1b:d0:d2:0a:3d:18:71:f9:c1:4e:1f:9f:c0:37:ab:39:
77:17:36:e3:95:2b:f0:62:ad:87:82:5b:2e:8e:00:2e:f7:e5:
0f:89:9a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:19:00 2024 by rpki-client on console-fra.rpki-client.org